Solved BSOD while Patching ArcheAge, caused by driver ntoskrl.exe

[HikariChino]

This has happened for the past 2 days, and it seems to only happen when I'm trying to launch ArcheAge by Trion. The screen freezes, bsods, then restarts itself. Sometimes, however, it bsods when I click on my profile icon when Windows starts up.

Attached should be the dmp files collected via DM log collector. (or whatever the instruction post told me to do)

 

[Boozad]

Welcome to 7F.

Please fill out your System Specs.

   Information

At 7F we rely heavily on knowing what hardware you have in your system, by filling out your system specs in the manner outlined below your specs will follow you round in every single post so we can see your hardware configuration at the click of a button without having to trawl through threads to find them.

​

Follow http://www.sevenforums.com/tutorials/180324-system-info-see-your-system-specs.html to fill in your System Specs with as much info as possible.
​

​

One

 NVIDIA DRIVERS

Your nVidia driver has been flagged.

SYMBOL_STACK_INDEX:  7

SYMBOL_NAME:  nvlddmkm+20553a

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nvlddmkm

IMAGE_NAME:  [COLOR=Red][B]nvlddmkm.sys[/B][/COLOR]

DEBUG_FLR_IMAGE_TIMESTAMP:  54d3b001

FAILURE_BUCKET_ID:  X64_0x1E_nvlddmkm+20553a

BUCKET_ID:  X64_0x1E_nvlddmkm+20553a

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:x64_0x1e_nvlddmkm+20553a

FAILURE_ID_HASH:  {8ec948ed-5e9d-9f9b-98b3-10e77c53bac6}

Check the nVidia drivers page for the latest version. Follow NVIDIA Drivers - Avoid Problems for the cleanest possible install.

Two

 MSI BLOATWARE

Uninstall the MSI bloatware installed on your system.

[FONT=&quot]MSI_LiveUpdate_Service[/FONT]

This one is blamed in this BSOD.

Debugging Details:
------------------


CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0x1E

PROCESS_NAME:  [COLOR=Red][B]Live Update.ex[/B][/COLOR]

CURRENT_IRQL:  0

ANALYSIS_VERSION: 6.3.9600.17029 (debuggers(dbg).140219-1702) amd64fre

​

Perform these steps, test the system for stability and report back.

 

[HikariChino]

Did what you said, tried patching Archeage again, here's the newest dmp file.

 

[Boozad]

Download and run MemTest86+ to test your RAM. http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html

   Note

Run MemTest86+ for at least 8 passes. Ideally set it off before you go to bed and leave it overnight, we're looking for zero errors here. A single error will show something's going bad with your RAM.

 

[HikariChino]

We've ran it once two days ago with no errors, but I will run it again.

 

[HikariChino]

Did a full test overnight with no errors, should i run another full test again tonight?

 

[Boozad]

Did it run eight full passes? And did you uninstall all MSI programs?

 

[HikariChino]

It said 4/4 with no errors, does that mean I need to do another overnight session, or is there a way to do 8 passes in one "session" if you get what I'm saying.

As for the MSI, I only uninstalled Live Updater, I still have Afterburner, Gaming App, Kombuster, and Network, Teaming, and Video Genies.

 

[Boozad]

Run MemTest86+ for eight passes as detailed in post #4. And uninstall all MSI bloatware.

 

[HikariChino]

All MSI ware has been uninstalled, and 8 passes done with no errors. I will try launching Archeage again when i get back from work and report back.

 

[HikariChino]

New one popped up while trying to install Sims 4.

Decided to let Origin install Sims 4 while taking a shower and came back with this.

All MSI programs are removed, Did 8 passes yesterday as stated in my previous post, and NVIDIA is fully updated.

 

[Boozad]

Time to enable Driver Verifier.

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff9010c90a090, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff9600014717e, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000005, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

Diagnostic Test

 DRIVER VERIFIER

Driver Verifier will stress your drivers and cause BSODs if any fail. Follow this tutorial to enable/disable it. http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

Enable Driver Verifier but only enable these options:

• Standard settings and IRP logging step 3.
• Don't enable Force Pending I/O Requests

   Warning

Make a System Restore point before enabling Driver Verifier.

   Note

Your system will act very sluggishly while DV is enabled, this is normal as your drivers will be being subjected to heavy testing in order to make them crash.

Post any resulting dump files.

 

[HikariChino]

Should I let my computer sit idle until it bsods?

 

[Boozad]

Probably best to, the drivers will be going under intense scrutiny so the PC will be extremely sluggish anyway.

 

[HikariChino]

Well that didn't take long. As soon as I restarted it bsods, here you go.

 

[Boozad]

Unfortunately the only dump file in those logs is the same one as from yesterday. Can you run again with Driver Verifier enabled and post up any subsequent logs.

 

[HikariChino]

Got it. Will delete the minidump items currently then run it again.

 

[Boozad]

Sounds good. Hang in there, we'll find the culprit.

 

[HikariChino]

Did what you said, got SPAMMED with bsods (had to use safe mode to disable verifer)

I managed to get 8 dmp files in the course of 5-6 minutes. Here you go.

 

[Boozad]

OK there are a few different STOPS registering here, 0x50 and 0x1A are pointing towards hardware. A STOP 0xA has revealed a driver though, your Intel USB 3.0 eXtensible Host Controller.

   Note

You can now disable Driver Veirfier.

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {210, 2, 0, fffff80002c5fd4e}

[COLOR=Red][B]*** WARNING: Unable to verify timestamp for iusb3xhc.sys
*** ERROR: Module load completed but symbols could not be loaded for iusb3xhc.sys[/B][/COLOR]
Probably caused by : iusb3xhc.sys ( iusb3xhc+5dcfe )

Followup: MachineOwner
---------

0: kd> lmvm iusb3xhc
start             end                 module name
fffff880`030f5000 fffff880`031ba000   iusb3xhc T (no symbols)           
    Loaded symbol image file: iusb3xhc.sys
    Image path: \SystemRoot\system32\DRIVERS\iusb3xhc.sys
    Image name: iusb3xhc.sys
    Timestamp:        [B][COLOR=Red]Fri Feb 22 12:33:45 2013[/COLOR][/B] (512765A9)
    CheckSum:         000C185A
    ImageSize:        000C5000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

You can see the highlighted driver date in the code above, and it looks like it could do with updating. I've scanned the ASUS download page for your motherboard and the strange thing is all of the drivers offered pre-date the one you have installed. Do you know where you installed that driver from?

Startup Programs

 REMOVE STARTUP PROGRAMS

Can you remove the following programs from your Startup.

[FONT=&quot]SpybotSD TeaTimer    C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe                                                [/FONT]  [FONT=&quot]Skype                "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized                  [/FONT]
  [FONT=&quot]CCleaner Monitoring  "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR                                         Momiji\Hikari                 [/FONT]
  [FONT=&quot]EADM                 "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart                                       Momiji\Hikari                 [/FONT]
  [FONT=&quot]ShadowPlay           C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart  Public                        [/FONT]

Do you use nVidia Streaming at all? If so, disable it.

FAULTING_IP: 
ndis!memcpy+204
fffff880`0188bf64 488b040a        mov     rax,qword ptr [rdx+rcx]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

BUGCHECK_STR:  0xD1

PROCESS_NAME:  [COLOR=Red][B]NvStreamNetwor[/B][/COLOR]

System File Checker

 SFC /SCANNOW

Open an elevated command prompt, copy and paste in sfc /scannow and hit enter.